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^ , Abstract. Generalized Cullen Numbers are positive integers of the form 

Cf,(n) := nb n + 1. In this work we generalize some known divisibility prop- 

VQ ' erties of Cullen Numbers and present two primality tests for this family of 

integers. The first test is based in the following property of primes from this 
family: n b = (— l) b (mod nb n + 1). It is stronger and has less computational 

^H ' cost than Fermat's test (for bases b and n) and than Miller-Rabin's test (for 

>T' ' base n). Pseudoprimes for this new test seem to be very scarce, only 4 pseu- 

doprimes have been found among the many millions of Generalized Cullen 
C"| Numbers tested. We also present a second, more demanding, test for wich 

• +—| ■ no pseudoprimes have been found. This test leads to a "quasi-deterministic" 

test, running in 0(log (TV)) time, which might be very useful in the search of 
Generalized Cullen Primes. 

1. Introduction 

> 

qs ■ The first major breakthrough in the general theory of primality testing was 

£SJ , achieved by Adleman, Pomerance and Rumely (see [Tj) giving a deterministic pri- 

mality test running in log ' og og ° s n ' time. This algorith, later improved by Cohen 
and Lenstra (see [5]), is known as the APRCL algorithm. 

C"- In 2004 three scholars from Kanpur University (Agrawal, Kayal and Saxena) 

introduced the AKS algorithm (see [2]), which was the first deterministic primality 
test running in polynomial time. In the second verion of their paper they proved 
that the running time of their algorithm was 0((logn) 75 ). Nevertheless, and de- 
spite being one of the cornerstones of Computational Number Theory, this algo- 
rithm has not been very useful in practice. This is because numbers for which AKS 
Vh ' algorithm is faster than the usual ones are beyond current computation capacity. 

Even the so-called practical versions of the AKS algorithm (see [3J, for instance) 
are not fast enough. As a consequence, prime "hunters" focus in families of integers 
for which primality can be determined by useful algorithms. 

For restricted families of integers much faster algorithms are known. The Lucas- 
Lchmer algorithm (see [33]), used for Mersenne Numbers, is deterministic and runs 
in 0((logn) 2 ) time. Proth, in [TS], gives an algorithm running also in O(logn) 2 ) 
time, which applies to numbers such that v-iin — 1) > \ log 2 n where 2 U2 ^ m ' is the 
biggest power of 2 dividing m and provided an integer a is given such that the 
Jacobi symbol (— ) = — 1. Proth's algorithm is not deterministic for every n. Later, 
Williams [T8] or Konyagin and Pomerance [T3] have extended these techniques to 
wider families of integers. 

Positive integers of the form n2 n + I are called Cullen Numbers and were first 
introduced by Father James Cullen in 1905 (see [6], (9J B20] or [13] for instance). 
Primes of this form are very scarce (in fact, in [10] it is shown that almost all Cullen 
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Numbers are composite) . Primality criteria suitable for Cullen Numbers have been 
presented and discussed in [16 . The only known Cullen Primes are those for n 
equal to: 

1, 141, 4713, 5795, 6611, 18496, 32292, 32469, 59656, 90825, 262419, 
361275, 481899, 1354828, 6328548, 6679881 (sequence A005849 in OEIS). 

The largest known Cullen prime is 6679881 x 2 6679881 + 1. It is a megaprime with 
2,010,852 digits and was discovered by a PrimeGrid participant from Japan. It is 
the fifteenth biggest known prime. In [3] a "quasi-deterministic" test for Cullen 
Numbers was given. 

A quite straightforward generalization of these numbers are the so-called Gen- 
eralized Cullen Numbers (GCN for short) which are integers of the form Cb(n) :— 
nb n + 1. This family was introduced by H. Dubner in [8] and is one of the main 
sources for prime number "hunters" . There exists a distributed computing project 
(http://www.primzahlenarchiv.de/) to find Generalized Cullen Primes (GCP for 
short) with the biggest GCP being C151 (139948), an integer with 304,949 digits. 
Noteworthy, for 29 values of b smaller than 200 no GCP has been found. 

To date, no specific primality test for Generalized Cullen Numbers has been 
introduced. This is the main goal of this work. The paper is organized as follows. 
In the second section we generalize some known divisibility properties of Cullen 
Numbers. In Section 3 we present two probabilistic primality tests for GCN. The 
first test (TEST1) is based in the fact that n b " = (-1) 6 (mod C b {n)) for every GCP 
Cb{n). This test is stronger and has less computational cost than Fermat's test (for 
bases b and n) and than Miller- Rabin's test (for base n) and seems to have very few 
pseudoprimes. Thus, the probability of error is extremely small: among the millions 
of numbers tested, only 4 pseudoprimes have been found. We also present another 
test (TEST2), more demanding than TEST1, for which no pseudoprime has been 
found. In the fourth section we present a "quasi-deterministic" version of TEST2, 
which has allowed to certify the primality of nearly every known GCP with the use 
of very modest technological resources in just a few minutes. We are convinced that, 
with the use of better technology directed to an efficient modular exponentiation, 
this algorith would help to break records for GCP. Finally, in Section 5, we stablish 
the computational complexity of the presented tests, we give the running time of our 
algorithm for various cases and we close the paper with an important conjecture. 

2. Some divisibility properties 

Although the main goal of the paper is to present primality tests for General- 
ized Cullen Numbers, it is interesting to study some divisibility properties of such 
numbers. First of all, we are interested in finding families of composite Generalized 
Cullen Numbers. A first result in this direction goes as follows. 

Proposition 1. Let nb(k,p) — (b k — k)(p— 1) — k and let p be a prime not dividing 
b. Then p divides Cb(rib(k,p)). 

Proof. It is clear that rib(k,p) = —b k (modp). Now, since 6 P_1 = 1 (mod p) we 
have that: 

C b (n h (k,p)) = -fc^-fcXP- 1 ) + 1 = (mod p). 

□ 
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Observe that, if p divides Cb{n) then p does not divide b, so if n ^ rib{k,p), we 
can apply the previous proposition to find another composite Generalized Cullen 
Number with the same base. Nevertheless, this process can be applied only in one 
step; i.e., given a prime divisor of Cb(n) we only find (at most) another m such 
that p also divides Cb(m). Thus, it is interesting to find a process that allows us 
to construct infinite families of Generalized Cullen Numbers divisible by the same 
prime. The next proposition goes in this direction. 

Proposition 2. Let p be a prime dividing C'b(n) and let h p — exp p (b); i.e., the 
smallest integer such that b hp = 1 (mod p). Then p also divides Cb(n + mph p ) for 
every integer m. 

Proof. If 77i — 1 we have: 

C b (n + ph p ) = b php (C b (n) - 1) +ph p b n+ph * + 1 = nb n + 1 = C b (n) = (mod p) 

and the result follows inductively. □ 

The propositions above generalize known results for the case b — 2 that can be 
found in [11] and [?]■ 

Now, given two Generalized Cullen Numbers, it can be interesting to study their 
common divisors. For example, if we consider Cb(n) and Cp(n) it is easy to see 
that any common divisor of these numbers must also divide \b n — /3 n \. If we restrict 
ourselves to Generalized Cullen Numbers of the same base we can present a more 
interesting result. 

Proposition 3. Let Cb(n) and Cb(jn) be two different Generalized Cullen Numbers 
with an = f3m. If d is a common divisor of Cb(n) and Cb(m), then d also divides 
\7i a + {-l) a+ P- 1 m fi \. 

Proof. First of all note that d cannot divide b. Also, since d is a common divisor, 
it must, assuming n > m, divide \Cb(n) — Cb(m)\ = b n \n — mb m ~ n \. Consequently 
d divides \n — mb m ~ n \. 

Now, d also divides nCb(n) = n 2 b n + n and it follows that d divides \n 2 b n + 
mb m ~ n \. If, for instance, n < m — n we get that d divides \n 2 — mb m ~ 2n \. If 
m — n < n we would get that d divides \m + n 2 b 2n ~ m \. 

Clearly we can proceed in this way until both powers of b are the same. Fur- 
thermore, we will need to perform the previous computations exactly a + j3 — 1 
times and at every step the middle sign changes and the exponent of either morn 
increases by 1. Thus, the desired result is finally obtained. We omit the details. □ 

It is worth remarking that the previous proposition does not depend on b. Thus, 
if A m _ n = |n Q + (— l) a+l3 ~ 1 m /3 \ is a prime, then Cb(n) and Cb(m) are either coprime 
or their greatest common divisor is A m ^ n for every value of b. 

3. TWO PROBABILISTIC PRIMALITY TESTS 

This section is devoted to present two probabilistic primality tests for Generaliza- 
dos Cullen Numbers. The first one will be compared with Fermat and Miller- Rabin 
for some witnesses. The second one will be the basis of a "quasi-deterministic" test 
which will we introduced in the next section. 

The proposition below presents the property of GCP in which TEST1 will be 
based. 
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Proposition 4. If Cb(n) is prime, then n b = (— l) fc (mod Cb(n)). 

Proof. Clearly, nb n = — 1 (mod Cb(n)). On the other hand, since 6 and Cb(n) are 
coprime, we have that b nb = 1 (mod Cb(n)). 
Now, taking this into account: 

-(-l) 6 = (-1) 6 "" 1 = (nb n ) b "- 1 = n b "- 1 b nbn - n = n b "- 1 b- n (mod C h {n)), 

from where it follows that: 

n b " = -(-l) b nb n = (-1) 6 (mod C b (n)), 

where negative exponents make sense since we are working over a field. □ 

Let us relate now this test with Fermat and Miller-Rabin primality tests. In 
fact, we will se that our test is stronger than both of them in the sense that if a 
Generalized Cullen Number passes our test, it will also pass Fermat and Miller- 
Rabin tests for certain choices of the base. 

Proposition 5. If n b = (— l) fc (mod Cb(n)) for an odd Cb(n), then Cb(n) is a 
Fermat (or weak) probable prime to base n. 

Proof. We have that: 

n C b (n)-l = n nb" = ^y ^ ^_^bn = j ( mod Cb (n)) , 

since bn must be even. D 

Remark. Although TEST1 is very similar to Fermat's test to base n, it has 
turned to be more subtle. We have only found 4 pseudoprimes for our test. 
Namely: C 80 (2) = 12801, C 35 7o(3) = 136497879001, C 570 (4) = 422240040001 
and Ci47o(4) = 18677955240001). On the other hand, three more pseudoprimes 
(CV(4), C63336(2) and £2355990(2)) appear for Fermat's test to base n. Observe 
that Ci47o(4) and Cs7o(4)) are Carmichael Numbers. 

Proposition 6. If n fc " = (— l) b (mod Cb(n)), then Cb{n) is a Fermat (or weak) 
probable prime to base b. 

Proof. Since b and n are coprime with Cb(n), they both have an inverse modulo 
Cbin). Moreover, n^ 1 = —b n (mod Cb(n)). 
Now: 

(-l) fc = n bn = {-b- n ) bn = (-l) b b- nbn (mod C b {n)). 

Thus, b- nbn = 1 (mod C b (n)) and, consequently, b Cb( - n ^- 1 = b nb " = 1 (mod C b (n)). 

D 

Remark. Although TEST1 is theoretically stronger than Fermat's test to base 
b, we have not found pseudoprimes for this test which are not pseudoprimes for 
TEST1. 

Proposition 7. If n b = (—l) b (mod Cb(n)), then Cb(n) is a strong probable prime 
to base n; i.e., it passes Miller- Rabin primality test. 

Proof Put n = 2 r h and b = 2 s k with k, h odd integers and r, s > 0. Then, 
C b {n) = 2 r h(2 s k) n + 1 = 2*ra + 1 with t = r + ns and m = hk n . We have that 
n b " = (-l) fc (mod C b (n)). Consequently n 2±m = n nb " = (-l) nb = 1 (mod C b (n)), 
since nb must be even. If n m ^ 1 (mod Cb(n)) it follows that n 2 m = — 1 (mod 
Cb(n)) and Cb(n) passes Miller-Rabin test to base n. □ 
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The following result is stronger than Proposition 4 and will give rise to another 
probabilistic test that we will denote by TEST2. This test involves cyclotomic 
polynomials of prime index and is more demanding than TEST1. It will be the 
basis of a "quasi-deterministic" test in the next section. 

Theorem 1. Let p be a prime number and b = p m b' with p not dividing b' . If 
Cb(n) := nb n + 1 is prime, then one of the following holds: 

b n 

i) (— n) pi = 1 (mod Cb(n)) for every i e {0, ...,nm}. 

b n 

ii) There exists K < mn such that (— n) p i = 1 (mod C'b(n)) for every i € 

b n 

{0, ...,K} and $ p ((— n) p k+1 ) = (mod Cb(n)), where $ p is the p-th cyclo- 
tomic polynomial. 

b n 

Proof. Proposition 4 implies that (— n)^ = 1 (mod Cf,(n)). If i) does not hold, 

b n 

let K < mn be the biggest integer such that (— ri)v Tr = 1 (mod Cj,(n)). Put 

b n 

x = (-n)p K+1 . Then = x' p - 1 = (x - l)$ p (x) (mod Cb(n)). The maximality of 
K implies that x — 1 ^ (mod Cb{n)) so, since Cb(n) is prime, & P (x) = (mod 
Cb(n)) and the proof is complete. □ 

Every Generalized Cullen Number satisfying Theorem 1 for some p, prime divisor 
of 6, will be certified as a probable prime for TEST2 to base p. If it is composite we 
will name it as a pseudoprime for TEST2 to base p. Among the four pseudoprimcs 
found for TEST1, the only one that passes TEST2 for some prime divisor of b 
is the Carmichael number Ci47o(4) which is a pseudoprime for TEST2 to base 2. 
Nevertheless, Ci4jo(4) is certified as composite since it does not pass TEST2 for 
any other prime divisor of 1470. The other three pseudoprimes for TEST1 do not 
pass TEST2 for any base. The authors have not found any composite Generalized 
Cullen Number passing TEST2 for every prime divisor of b. In fact they conjecture 
that such GCN does not exist. 

4. A "quasi-deterministic" test 

We will now see that passing TEST2, together with a bounding condition on K, 
gives a sufficient condition for primality. 

Theorem 2. Let b = p^ 1 ■ ■ -p r s s be a positive integer. If there exist pj prime dividing 
b and K < nrj such that: 



i) $ P] ((-n) p ^ +1 ) = (mod C b {n)). 
ii) ntj -K>\ log p . nb n = \ log Pj n + § log p . b. 

Then Cbiji) is prime. 



Proof. If q is a prime divisor of Cb(n) we have that $ Pj . ((— n) p j ) = (mod q). 



K+l 

It follows that the order of (— nyi in Z* is exactly pj and, consequently, the 



order of — n is a divisor of —^ = p™ 1 ■ • • Pj 3 ■ ■ ■ p™ B ■ Moreover, (— n) Pj 

is not congruent with 1. For if it was, then = <& Pj (l) (mod q) which is a 
contradiction being q and pj coprime. Thus, the order of — n does not divide 
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-jhp- = p™ 7 " 1 • • -pY 3- ' ' 'PT° ■ As a consequence, the order of — n is a multiple 

p 3 

of p" rj and it follows that p™" 3 \q— 1. Finally we obtain that: 



q > Pp K + 1 > p] """' '" + 1 = Vn^ + 1 > y/C^n). 

This must hold for every q prime divisor of Cb{n). Clearly it is a contradiction 
unless q — Cb(n) is its only prime divisor and the result follows. □ 

If b is a prime-power the previous result can be slightly simplyfied in the following 
way. 

Corollary 1. Let b = p m with p a prime. If Q p ((—n) p ) = (mod Cb{n)) with 
nm > K > 7 -^p- + i log An), then Cb(n) is prime. 

Remark. The previous Corollary generalizes [4j Teorema 4] for b — 2 and m = 1. 
Observe that in such case $2(( — n ) 2 ) — n 2 + 1. 

5. Computational complexity 

Let us present the pseudo code of an algorithm implementing TEST1 and TEST2. 
We will also justify its polynomial complexity. 

Algorithm. (TEST1 and TEST2 to base P) 

INPUT: n and b = p™ 1 ...pf°; M := mf, P := Pj and N := nb n + 1 

Step 1: If n fc " ^ (-l) b (mod N) 

then RETURN: TV is a COMPOSITE NUMBER. Stop. 

Step 2: If n fc " = (-l) b (mod N) 

then RETURN: TV is a PROBABLE PRIME for TEST1 

and go to Step 3. 

Step 3: Compute K := max{i < nM | ((—n)^ = 1 (mod TV)} 

Step 4: If K = nM 

then RETURN: TV is a PROBABLE PRIME for TEST2 to base P. Stop. 

Step 5: If K < nM and $ P ((-n)F^Fr) = ( m od TV) 

then RETURN: TV is a PROBABLE PRIME for the TEST2 to base P 

and go to Step 7. 

Step 6: If K < nM and $ P ((-n)^rr) ^ (mod TV) 
then RETURN: TV is a COMPOSITE NUMBER. Stop. 
Step 7: If nM -K>\ log P (TV - 1) 
then RETURN: TV is a PRIME NUMBER. Stop. 

The correctness of the algorithm is a straightforward consequence of Proposition 
4 and Theorems 1 and 2. To study its complexity, we first need to present a 
technical lemma. Its proof is elementary and we omit. 

Lemma 1. Let A = {ao,ai, • • • ,a n } a set with a n ^ a$ and with the property 
a s =/= a,Q =>■ a s+ i ^ oq. If the computation of each ai is of complexity 0(h), then 
the complexity of computing max{j \ < i < n, Oj = a^} is 0(h\og 2 (n)). 

Theorem 3. If TV := nb n + I, the complexity of the algorithm above is 

0(log 3 (TU(TV))log 2 (TV)) C 0(log 2 (TV)), 
where W is Lambert's W function. 
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Proof. Complexity of steps 1 and 2 is that of the modular exponentiation n^ -1 )/™ 
(mod N). Taking into account that 0(n) = 0{W(N)) c 0(log(N)) and that 
products modulo N can be performed by Schoenhage-Strassen algorithm (see |17j ) 
with complexity 

0(log(N) log(log(JV)) log(log(log(iV)))), 
we get the complexity of these two steps to be: 



T{N) := 0(log 



N 



W{N) 



log(iV) log(log(iV)) log(log(log(7V)))). 



Step 3 requires to perform at most log(nM) modular exponentiations with com- 
plexity analogous to that of step 1. Consequently, by the lemma above, the total 
complexity will be 

0(T{N)log(W(N)) c 0{log 3 (W(N))log 2 (N)) c 0(log 2 (A)). 

Steps 4 through 7 do not increase the complexity since they are mere verifications 
of equalities and inequalities. □ 

From a computational point of view, this work is promising because it presents 
primality tests for GCN whose computational complexity is the same as that of 
modular exponentiation. This is the case, since only a relatively small number of 
modular power has to be computed. Other tests of general character are clearly 
inferior. For example, Lucas test, which seems appropriate here due to the easy 
factorization of C&(n) — 1 has problems if n has many prime divisors. Altough the 
tcchology used by the authors limits to PowerMod command in Mathematica 6.0 
(in an Intel core2 Duo P7450 @ 2.13 GHz with 4Gb of RAM), they have been able to 
certify primality for nearly every known GCP. We are sure that the tests presented 
in this work, using a better technology focused on efficient modular exponentiation, 
will allow to break records in the family of GCN. 

Just to enlighten what we have just said, let us compare our primality test with 
the PrimeQ command implemented in Mathematica™. According to Mathematica™ 
manual, this command uses the multiple Rabin-Miller test in bases 2 and 3 com- 
bined with a Lucas pseudoprime test. Below we present the runnig times for the 
certification of some known GCP (for b — 3, 8 and 20). We also show the number 
of modular exponentiations performed in the third step of the algorithm. 



b=3, n = 


1400 


1850 


2848 


4874 


7268 


19290 


337590 


Number of digits of C3 (n) 


672 


886 


1363 


2330 


3472 


9208 


161077 


K + 1 (Step 3) 


1 


2 


2 


1 


1 


1 


? 


TEST2 to base 3 (Time in s.) 


0.06 


0.17 


0.56 


1.49 


4.55 


54.16 


? 


PrimeQ (Time in s.) 


0.09 


0.17 


0.50 


2.04 


6.06 


71.19 


? 



b=8, n= 


5 


17 


23 


1911 


20855 


35945 


42816 


Number of digits of Cg (n) 


6 


17 


23 


1730 


18839 


32467 


38672 


K + 1 (Step 3) 


2 


2 


2 


3 


6 


5 


2 


TEST2 to base 2 (Time in s.) 








0.87 


788. 


2811. 


2112. 


PrimeQ(Timc in s.) 








0.93 


464. 


1933. 


2930. 
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b=20, n= 


3 


6207 


8076 


22356 


Number of digits of C20 (n) 


5 


8080 


10512 


29091 


K + 1 (Step 3) 


1 


1 


1 


2 


TEST2 to base 5 (Time in s.) 


0. 


32.1 


62.4 


1347. 


PrimeQ (Time in s.) 


0. 


50.88 


99.6 


1396. 



Note that PrimeQ is a probabilistic test (even though according to Mathematica 
manual no pseudoprime for this test has still been found). In the examples above 
our test certified primality in a deterministic way and faster (except for two cases) 
than PrimeQ. The deterministic version of PrimeQ implemented inMathematica , 
ProvablePrimeQ, was so slow that it is not worth presenting the comparison. 

To finish, we have to point out that the presented algorithm is not strictly a 
deterministic primality test. We could say it is a "quasi-deterministic" test in the 
sense that if the output is PRIME NUMBER, the tested integer is certainly a 
prime, but it could be possible that a GCP was not certified as such. Nevertheless, 
computational evidence suggest that this is not the case for moderately big values 
of n; in fact, such primes have be found only for n < b. Moreover, the experiments 
also suggest that in step 3 the value of K is always very small with respect to n. 
This leads us to the following conjecture. 

Conjecture. If n > b, then the algorithm is deterministic. 
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